Wellesley College, Fall 2006

CS342: Computer Security

Course Information

Lectures: Tue/Fri 1:30--2:40pm in SCI E111
Prereqs: CS230, CS240, and a burning desire to learn about computer security
Syllabus/Calendar
FirstClass: CS342-F06
Instructors:

Daniel Bilar (call me "44616e" or "Dan" whichever is easier)
Office: SCI E108 (x3093)
Web: http://cs.wellesley.edu/~dbilar
Office Hours: T 3–5pm, R 3–5pm

Franklyn Turbak (call me "Lyn")
Office: SCI E126 (x3049)
Web: http://cs.wellesley.edu/~fturbak
Office Hours: M 3–5pm, W 4–6pm, F 3–5pm

Handouts

Handout #1: Course Information
Handout #2: Symmetric Key Cryptography
Handout #3: Problem Set 1
Handout #4: Simple Protocols
Handout #5: Authentication
Handout #6: Problem Set 2
Handout #7: Networks and TCP-IP protocol stack
Supplements to #7: Some more details and historic background
Handout #8: Anatomy of an Attack
Handout #9: Problem Set 3
Handout #10: Network Attacks
Handout #11: Introduction to Malware
Handout #12: Worms
Handout #13: Problem Set 4
Handout #14: Crash Course in C, x86 Assembly, and Compilation
Handout #15: PS 1 Solution (in class)
Handout #16: PS 2 Solution (in class)
Handout #17: PS 3 Solution (in class)
Handout #18: PS 4 Solution (in class)
Handout #19: Code Exploits
Handout #20: Project Proposal Guidelines
Handout #21: Problem Set 5
Handout #22: Intrusion Detection Systems
Handout #23: Hacking Tutorial Notes
Handout #24: Resources for Electronic Voting Discussion

Resources

Some computer security courses elsewhere
General Security Info
- Bruce Schneier's blog and Crypto-Gram newsletter
- CERIAS
- SANS Institute (newsletters, reading room)
- SecurityFocus
- Peter Neumann's Risks Digest
Vulnerabilities
- Bugtraq (other Security Focus mailing lists)
- CERT's Vulnerabilities and Fixes
- SANS top 20 vulnerabilities
- SANS Internet Storm Center
Cryptography
- Introduction to Modern Cryptography, by Mihir Bellare and Phillip Rogaway (UCSD course CSE207)
- Handbook of Applied Cryptography, by Alfred Menezes, Paul van Oorschot, and Scott Vanstone
Ethics
- Responsible Use of Information and Technology Resources at Wellesley College
- MIT's Policy on the Use of Information Technology
- ACM Code of Ethics and Professional Conduct
Electronic Voting
- Ben Adida's blog
- Adida and Neff's Ballot Casting Assurance paper.
Linux
- Wellesley local Unix Introduction
- Larry Greenfield's The Linux Users' Guide [HTML] [PDF]
- Linux Documentation Project
Emacs
Programming
- Scott's C/C++ for Java programmers
Intel x86 Instruction Set
- Intel Instruction Set Summary (2 pages)
- Intel x86 Instruction Reference
- Paul Carter's PC Assembly Language Book
Privacy
- Lawrence Lessig's The Architecture of Privacy
- Betsy Masiello's Privacy Implications of Surveillance: The Destruction of Anonymity
Useful Software
- VMWare Player
- Knoppix STD